Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: poWfGRUvOInfTrn9FauEPX+2prqd8SbKDczWz69JImI=
Subject key identifier: 7D:2B:34:4D:B4:05:3A:A5:48:4B:98:B4:AE:75:2A:64:E3:A6:09:B0
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 01A08C43BE9620E4A657AED217D09AFF672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 10CC
Signing time: Thu 10 Sep 2026 17:00:44 +0000
Manifest this update: Thu 10 Sep 2026 17:00:44 +0000
Manifest next update: Fri 11 Sep 2026 17:00:44 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: Xl08FfBjyTTuz8qm9BYHs8yUTCgoeXpq2I+C1nJxhTQ=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:be:96:20:e4:a6:57:ae:d2:17:d0:9a:ff:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Sep 10 17:00:44 2026 GMT
Not After : Sep 11 17:00:44 2026 GMT
Subject: CN=7d2b344db4053aa5484b98b4ae752a64e3a609b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:4e:13:f9:39:2a:0d:9b:74:3b:61:92:f1:
71:57:33:e0:ed:22:f6:b7:f9:bc:82:49:34:14:01:
79:a1:44:85:d1:65:29:10:97:8e:6a:42:0c:e0:bd:
29:dc:2f:b5:f1:a2:e1:f0:ab:33:01:42:45:01:d2:
1b:69:13:af:f2:da:56:e3:1c:e9:52:2f:fe:6b:25:
8c:63:b6:7c:54:fd:0b:1d:df:09:28:26:63:4f:49:
00:0a:8a:ea:f8:f5:bb:14:5e:95:87:6d:06:86:de:
cf:ae:d9:22:8a:b0:09:c4:8c:df:ce:a8:b9:1c:58:
25:af:17:55:ef:f5:9b:2a:9c:fd:2f:a5:dc:a2:ae:
b3:59:4e:a1:a1:f0:69:64:95:99:eb:f5:94:fc:22:
96:99:5f:0e:8f:d2:d2:e0:49:6f:62:93:1c:9f:7c:
dc:11:0a:79:93:ef:9f:26:03:16:b1:5d:a3:94:c0:
93:be:08:c4:d4:63:38:c7:5a:a4:08:8d:e6:45:8c:
6a:96:96:12:f1:fb:97:6d:7e:33:44:6e:9f:c7:eb:
1d:3f:36:60:f8:ab:f8:60:b3:70:60:c2:41:7c:c0:
2b:de:66:cb:62:45:5d:52:26:07:d8:d5:60:07:52:
99:99:1d:5c:02:37:39:88:75:07:12:4c:0b:15:7b:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:34:4D:B4:05:3A:A5:48:4B:98:B4:AE:75:2A:64:E3:A6:09:B0
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8d:7d:39:69:bd:2c:6f:84:dd:b1:b0:d5:09:ec:cc:21:f0:
26:8e:6f:25:18:2b:21:91:08:50:e0:c1:51:54:3b:c1:1d:b0:
31:14:44:99:8b:f0:85:8c:33:3d:0f:16:2c:dd:f3:4e:20:55:
ed:00:4c:a0:ef:7f:38:6f:18:7b:8a:b9:65:b1:5e:4d:f2:75:
c8:9a:42:01:42:90:b3:b4:2e:35:71:ab:29:9b:ba:de:a2:e9:
94:b6:69:ff:7b:e7:36:45:7a:cc:5f:32:28:d0:d9:10:c3:ba:
2f:45:71:06:e2:c2:49:37:f2:19:9d:0e:a3:c2:60:aa:4f:f9:
b1:d1:b8:fe:ed:07:46:c7:dc:b9:d4:9a:a3:ad:fe:33:ff:a3:
d0:f0:5d:4b:cb:c5:dd:22:18:a3:96:1f:b7:ce:ea:b9:16:ab:
11:e2:da:cb:74:e1:06:02:ea:a8:81:00:5f:40:bf:2c:e3:33:
a1:b1:a4:03:0b:ca:b5:ed:2f:1a:5d:29:c5:3a:99:17:ea:36:
d9:62:dd:63:d3:65:ea:0c:67:3a:1f:19:cb:ce:eb:d2:97:80:
e2:42:70:1b:a6:a4:da:99:65:dc:ae:8d:a5:15:bd:64:2e:89:
30:87:8c:67:fb:e8:ad:4c:28:ed:ee:fe:92:e6:77:33:0f:3b:
8d:c4:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:51:42 2026 by rpki-client